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Independent Orbiter Assessment 
Assessment of the Pyrotechnics FMEA/CIL 


1.0 EXECUTIVE SUMMARY 


\ihe McDonnell Douglas Astronautics Company (MDAC) was selected in 
.June 1986 to perform an Independent Orbiter Assessment (IOA) of 
|the Failure Modes and Effects Analysis (FMEA) and Critical Items 
iist (CIL) . Direction was given by the STS Orbiter and GFE 
Projects Office to perform the hardware analysis using the__^ 
instructions and ground rules defined in NSTS 22206. Instructions 
for Preparation of FMEA and CIL. 10 October 1986 ; — - — - 


The IOA effort first completed an analysis of the Pyrotechnics 
(PYRO) hardware, generating draft failure modes and potential 
critical items. To preserve independence, this analysis was 
accomplished without reliance upon the results contained within 
the NASA FMEA/CIL documentation. The IOA results were then 
compared to the NASA FMEA/CIL baseline with proposed Post 51-L 
updates included. A resolution of each discrepancy from the 
Comparison is provided through additional analysis as required. 
This report documents the results of that comparison for the 
Orbiter Pyrotechnics hardware. - 


Tbe IOA product for the Pyrotechnics analysis consisted of forty- 
one (41) failure mode "worksheets" that resulted forty-one (41) 
Potential Critical Items (PCIs) being identified!' Comparison was 
made to the NASA baseline (as of November 1986) which 
consisted of thirty-seven (37) FMEAs and thirty-seven (37) CIL 
items. The comparison determined if there were any results which 
had been found by the IOA that were, not in the NASA baseline. 

This comparison produced agreement on all but seven (7) FMEAs 
which caused differences' in four' (4) CIL items. Three (3) of the 
differences were caused by incorrect criticality assignments on 
the IOA FMEAs where the IO£ 'analysis numerical values were not in 
agreement with the "Effects" verbiage. IOA acknowledges the 
error and agrees with the NASA criticality assignment to the 
failure and these items are not issues. The CIL was not in 
question as IOA had considered all to be CIL items. The IOA 
analysis includes four (4) failure modes' (CIL items) which were 
not included in the NASA FMEAs or CIL. Figure 1 presents a 
comparison of the proposed Post 51-L NASA baseline, with the IOA 

recommended baseline, and any issues. \ 

\ 

Some of the miscompares arose due to differences between the NASA 
and IOA FMEA/CIL preparation instructions. NASA had^ used an 
older ground rules document which has since been superseded by 
the NSTS 22206 used by the IOA. After comparison, there were no 
other discrepancies found that were not already identified by 
NASA, and the remaining issues may be attributed to differences 
in ground rules. 
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2 . 0 INTRODUCTION 


2 . 1 Purpose 

The 51-L Challenger accident prompted the NASA to readdress 
safety policies, concepts, and rationale being used in the 
National Space Transportation System (NSTS) . The NSTS Office has 
undertaken the task of re-evaluating the FMEA/CIL for the Space 
Shuttle design. The MDAC is providing an independent assessment 
of the proposed Post 51-L Orbiter FMEA/CIL for completeness and 
technical accuracy . 

2.2 Scope 

The scope of the independent FMEA/CIL assessment activity 
encompasses those Shuttle Orbiter subsystems and GFE hardware 
identified in the Space Shuttle Independent FMEA/CIL Assessment 
Contractor Statement of Work. Each subsystem analysis addresses 
hardware, functions, internal and external interfaces, and 
operational requirements for all mission phases. 


2.3 Analysis Approach 

The independent analysis approach is a top-down analysis 
utilizing as-built drawings to breakdown the respective subsystem 
into components and low-level hardware items. Each hardware item 
is evaluated for failure mode, effects, and criticality. These 
data are documented in the respective subsystem analysis report, 
and are used to assess the proposed Post 51-L NASA and Prime 
Contractor FMEA/CIL. The IOA analysis approach is summarized in 
the following Steps 1.0 through 3.0. Step 4.0 summarizes the 
assessment of the NASA and Prime Contractor FMEA/CIL which is 
documented in this report. 


Step 1.0 Subsystem Familiarization 

1.1 Define subsystem functions 

1.2 Define subsystem components 

1.3 Define subsystem specific ground rules and 
assumptions 

Step 2.0 Define subsystem analysis diagram 

2.1 Define subsystem 

2.2 Define major assemblies 

2.3 Develop detailed subsystem representations 

Step 3.0 Failure events definition 

3 . 1 Construct matrix of failure modes 

3.2 Document IOA analysis results 
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Step 4 . 0 Compare IOA analysis data to NASA FMEA/CIL 

4.1 Resolve differences 

4 . 2 Review in-house 

4 . 3 Document assessment issues 

4.4 Forward findings to Project Manager 


2.4 Ground Rules and Assumptions 


The ground rules and assumptions used in the IOA are defined in 
Appendix B. The Pyrotechnic specific ground rules and 
assumptions are defined in paragraph B.3 of Appendix B. 
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3 . 0 SUBSYSTEM DESCRIPTION 


3.1 Design and Function 

Space Shuttle Orbiter Pyrotechnics are defined as the devices and 
assemblies operated by solid propellants or explosive devices. 

The Pyrotechnics addressed in this study are those that are used 
in the following applications. The Pyrotechnics used as the 
primary method for separation of the External Tank from the 
Orbiter. The Pyrotechnics used for assist and backup devices for 
Landing Gear deployment. The Pyrotechnics employed as emergency 
devices to guillotine and jettison the Remote Manipulator Arm, 
guillotine and release the Rendezvous Radar (RR) Antenna, and 
separate the outer window and open the inner window for ground 
emergency egress. 

1. Landing/Deceleration Systems Pyrotechnics are employed in 
the Nose Landing Gear (NLG) Uplock Release, Main Landing 
Gear (MLG) Uplock Release, and the NLG Extension Thruster. 
Pyrotechnic uplock thrusters serve as backup to the 
Hydraulic Deployment System for the NLG and the MLG prior 
to landing and are used only if the primary hydraulic 
system fails. The pyrotechnic NLG Extension thruster is 
used to provide mechanical assist to initiate nose gear 
and nose gear door movement against opposing air loads 
and are fired every flight whether needed or not. 

2. Orbiter/External Tank (ET) Separation Mechanisms 
employ pyrotechnic devices as the primary method to 
separate the ET from the Orbiter at one forward (fwd) and 
two aft attach points and to disconnect the Liquid 
Hydrogen (LH2) and the Liquid Oxygen (L02) umbilical 
plates. The fwd structural attach point is separated by 
fracture of a single Fwd Attach Shear Bolt. The aft 
structural attach points are separated by fracture of 
their respective Aft Attach Frangible Nut. The umbilical 
plates are separated by fracturing six frangible nuts. 


3. Rendezvous Radar (RR) Antenna Emergency Release 
Pyrotechnics are provided to release the structural 
attachment and sever the cable in the event the normal 
RR Antenna stowage mechanism fails and RR Antenna 

is necessary to permit payload bay door closure. 

4. Payload Retention and Deploy Jettison Pyrotechnics are 
used to guillotine the cables and jettison the the 
remote^ manipulator arm and arm support bracket in the 
event the normal retraction stowage mechanism fails and 
the arm interferes with payload bay door closure for 
safe deorbit. 
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3.1 Design and Function (cont'd) 

5. Crew Station and Equipment Ground Emergency Egress 

Pyrotechnics are employed to break the attach bolts to 
the sever the outer window and to open the inner 
window. Window severance can be initiated from either 
the interior of the crew compartment or the exterior 
right hand side for ground crew use. The system would 
only be utilized if a failure occurs that requires crew 
egress and the entry door is jammed. 


3.2 Interfaces and Locations 

1. The Landing/Deceleration Pyrotechnics interface with the 
Electrical Power Distribution and Control (EPD&C) Subsystem 
at the Nasa Standard Initiators (NSIs) via the Pyro 
Initiator Controllers (PICs) to initiate operation of the 
pyrotechnic devices. The pyrotechnics interface 
mechanically with the NLG and MLG Uplock R el e as e Mechanisms 
to provide backup to the Hydraulic Deployment System and to 
provide assist to the NLG to initiate Nose Gear/Door 
movement against opposing air loads. 

2. The Orbiter/ET Separation Pyrotechnics interface with the 
Electrical Power Distribution and Control XSPD&C) Subsystem 
at the Nasa Standard Initiators (NSIs) via the Pyro 
Initiator Controllers (PICs) to initiate operation of the 
pyrotechnic devices to effect Orbiter/ET separation upon 
command. The pyrotechnics interface at one fwd and two aft 
attach points that structurally attach the elements and also 
at the L02 and LH2 umbilical plates. 


3. The RMS Guillotine and Jettison Pyrotechnics interface with 
the Electrical Power Distribution and Control (EPD&C) 
Subsystem at the Nasa Standard Initiators (NSIs) via the 
Pyro Initiator Controllers (PICs) to initiate operation of 
the pyrotechnic devices to sever the electrical cable and 
release the manipulator arm and arm support bracket if 
required. The pyrotechnics interface physically with the 
RMS at the base and at the three Manipulator Positioning 
Mechanisms (MPMs) . 

4. The RR Guillotine and Release Pyrotechnics interface with 
the Electrical Power Distribution and Control (EPD&C) 
Subsystem at the Nasa Standard Initiators (NSIs) via the 
Pyro Initiator Controllers (PICs) to initiate operation of 
the pyrotechnic devices to sever the electrical cable and 
effect non-propuls ive emergency release of the RR Antenna. 
The pyrotechnics interface mechanically with the RR Antenna 
at the antenna structural attach point. 
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3.2 Interfaces and Locations (cont'd) 

5. The Crew Station and Equipment Pyrotechnics interface with a 
T-handle in the crew compartment and another on the exterior 
right hand side, either of which can be used to fire a 
mechanical initiator to blow away the outer panel and open 
the inner window panel for emergency crew egress. A stowed 
prybar is provided to force open the inner window if 
required. 


3 . 3 Hierarchy 

Figure 2 illustrates the hierarchy of the Pyrotechnics hardware 
and the corresponding subcomponents. Figures 3 through 9 
comprise the detailed system representation. 
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Figure 2 - PYROTECHNIC SUBSYSTEM OVERVIEW 
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4 . 0 ASSESSMENT RESULTS 

The IOA analysis of the Pyrotechnics hardware initially generated 
forty-one (41) failure mode worksheets and identified forty-one 
(41) Potential Critical Items (PCIs) before starting the 
assessment process. No additional failure mode analysis 
worksheets were generated to facilitate comparison. These 
analysis results were compared to the proposed NASA Post 51-L 
baseline of thirty-seven (37) FMEAs and thirty-seven (37) CIL 
items, which were generated using the NSTS-22206 FMEA/CIL 
instructions. Upon completion of the assessment, twenty-seven 
(27) of the thirty-seven (37) FMEAs were in agreement. Of the 
thirteen (13) that remained, seven (7) had minor discrepancies 
that did not affect criticality. Of the remaining six (6) , three 
(3) were the result of data entry errors and involve the 
numerical criticality assignment. IOA recommends upgrading the 
criticalities of two (2) IOA FMEAs from 2/1R to 1/1 and 
downgrading the criticality of one IOA FMEA from 1/1 to 2/1R. 
There are four (4) IOA FMEAs for two (2) components not analyzed 
by the NASA FMEAs. In summary, IOA recommends that the credible 
failure modes of ’’Fail to Function" and "Inadvertent Operation" 
be included for the respective pressure cartridges in the RMS 
Guillotine Assembly and the Rendezvous Radar Release Mechanism. 

A summary of the quantity of NASA FMEAs assessed, versus the 
recommended IOA baseline, and any issues identified is presented 
in Table I. 


+ — + 

| Table I Summary of IOA FMEA Assessment | 

+ + + + + 

j Component | NASA | IOA | Issues | 

+ + + + + 


j Component | NASA | IOA | Issues | 

+ + + + + 


Landing/Decel 

9 

9 

0 

Orbiter/ET Sep 

12 

12 

0 

Rend Radar Rel 

4 

8 

4 

P/L Retn/Depl 

6 

6 

0 

Crew Sta & Eqp 

6 

6 

0 


+ + + + + 

| TOTAL | 37 | 41 | 4 [ 

+ + + + + 
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A summary of the quantity of NASA CIL items assessed, versus the 
recommended IOA baseline, and any issues identified is presented 
in Table II. 




| Table II Summary of IOA CIL Assessment | 

+ + + + + 


Component 

NASA 

L J 

IOA 

Issues 1 

Landing/Decel 

9 

9 

r 1 

0 

Orbiter/ET Sep 

12 

12 

0 

Rend Radar Rel 

4 

8 

4 

P/L Retn/Depl 

6 

6 

0 

Crew Sta & Eqp 

6 

6 

0 


+ + + + + 

I TOTAL | 37 | 41 | 4 | 

+ + + + + 


Appendix C presents the detailed assessment worksheets for each 
failure mode identified and assessed. Appendix D highlights the 
NASA Critical Items and corresponding IOA worksheet ID. Appendix 
E contains IOA analysis worksheets supplementing previous 
analysis results reported in Space Transportation System 
Engineering and Operations Support (STSEOS) Working Paper No. 
1.0-WP-VA86005-01, Analysis of the Pyrotechnics Subsystem, 19 
January, 1988. Appendix F provides a cross reference between the 
NASA FMEA and corresponding IOA worksheet (s) . IOA 
recommendations are also summarized. 

Table III presents a summary of the IOA recommended failure 
criticalities for the Post 51-L FMEA baseline. Further 
discussion of each of these subdivisions and the applicable 
failure modes is provided in subsequent paragraphs. 

7 7-7 + 

I TABLE III Summary of IOA Recommended Failure Criticalities ] 

' . . , . . ■ 1 L 


Criticality: 

H 

1/1 

b H 

2/1R 

b H 

2/2 

h H 

3/1R 

b H 

3/2R 

3/3 

b + 

TOTAL 

Landing/Decel 

8 

1 

0 

0 

0 

0 

9 

Orbiter/ET Sep 

9 

3 

0 

0 

0 

0 

12 

RR Ant Rel 

4 

2 

2 

0 

0 

0 

8 

P/L Retn/Depl 

5 

0 

1 

0 

0 

0 

6 

Crew Sta & Eq 

2 

i 

4 

0 

L J 

0 

0 

0 

6 

| TOTAL 

r *■ 

| 28 
H 

| 10 
K H 

r * 

1 3 

h 

r 

1 0 

I- 

r 

1 0 

h 

1 0 

h — 

T " 

1 

1 

1 £> 

1 H 
1 
1 
1 

+ 


17 






Of the failure inodes analyzed, forty-one (41) were determined to 
be critical items. A summary of the IOA recommended critical 
items is presented in Table IV. 

+—■” —————————————————— — *- 

| TABLE IV Summary of IOA Recommended Critical Items j 


Criticality: 

1 

1/1 

2/1R 

h— 

2/2 

3/1R 

3/2R 

i- —— — 

3/3 

TOTAL 

Landing/Decel 

8 

1 

0 

0 

0 

0 

9 

Orbiter/ET Sep 

9 

3 

0 

0 

0 

0 

12 

RR Ant Rel 

4 

2 

2 

0 

0 

0 

8 

P/L Retn/Depl 

5 

0 

1 

0 

0 

0 

6 

Crew Sta & Eq 

2 

L J 

4 

0 

0 

L „J 

0 

S— H 

0 

L J 

6 

L -j 


I TOTAL | 28 | 10 | 3 | 0 | 0 | 0 | 41 j 

+ + + + + + + + + 
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The scheme for assigning IOA assessment (Appendix C) and analysis 
(Appendix E) worksheet numbers is shown in Table V. 


Table V IOA Worksheet Numbers 


Pyrotechnic Systems and Components 


LANDING/DECELERATION SYSTEMS 

MLG Uplock Release Thruster Assy 
MLG Uplock Release Thruster Pressure 
MLG Uplock Release Thruster Pressure 
NWG Uplock Release Thruster Assy 
NWG Uplock Release Thruster Pressure 
NWG Uplock Release Thruster Pressure 
NWG Extension Assist Thruster Assy 
NWG Exten Assist Thrust Assy Pressure 
NWG Exten Assist Thrust Assy Pressure 


Cartridge 

Cartridge 

Cartridge 

Cartridge 

Cartridge 

Cartridge 


ID Number 


4601 

4602 

4603 

4604 

4605 

4606 

4607 

4608 

4609 


ORBITER/ET SEPARATION MECHANISMS 

Forward Separation Shear Bolt 
Forward Separation Shear Bolt 
Fwd Sep Shear Bolt Pressure Cartridge 
Fwd Sep Shear Bolt Pressure Cartridge 
Aft Separation Frangible Nut (1 Left/1 Right) 
Aft Separation Frangible Nut (1 Left/1 Right) 
Aft Sep Frangible Nut Detonator Booster (2/Nut) 
Aft Sep Frangible Nut Detonator Booster (2/Nut) 
Umbilical Plate Sep Frangible Nut (3/Plate) 
Umbilical Plate Sep Frangible Nut (3/Plate) 
Umbil Plate Sep Frangible Nut Detonator (2/Nut) 
Umbil Plate Sep Frangible Nut Detonator (2/Nut) 


4651 

4652 

4653 

4654 

4655 

4656 

4657 

4658 

4661 

4662 

4663 

4664 


RENDEZVOUS RADAR ANTENNA EMERGENCY RELEASE 


Guillotine Assy 
Guillotine Assy 

Guillotine Assy Pressure Cartridge 
Guillotine Assy Pressure Cartridge 
Release Nut 
Release Nut 

Release Nut Pressure Cartridge 
Release Nut Pressure Cartridge 


4701 

4702 

4703 

4704 

4705 

4706 

4707 

4708 








| Table V IOA Worksheet Numbers (Cont'd) 

1 

j Pyrotechnic Systems and Components | 

ID Number | 

PAYLOAD RETENTION AND DEPLOY RMS RELEASE 


Manipulator Positioning Mechanism Retractor 

4751 

Manipulator Positioning Mechanism Retractor 

4752 

Shoulder Umbilical Guillotine Assy Type I 

4753 

Shoulder Umbilical Guillotine Assy Type I 

4754 

Pedestal Umbilical Guillotine Assy Type II 

4755 

Pedestal Umbilical Guillotine Assy Type II 

4756 

CREW STATION AND EQUIPMENT 


Outer Window Assy 

4801 

Inner Window Assy 

4802 

Energy Transfer System 

4803 

Initiator Assy Pyro 

4804 

0.3-Sec Time Delay Cartridge Assy 

4805 

Thru Bulkhead Initiator 

4806 


4.1 Assessment Results - Landing/Deceleration System 

Pyrotechnics 

The IOA analysis of the Landing/Deceleration System Pyrotechnics 
generated nine (9) failure mode worksheets and identified nine 
(9) Potential Critical Items before starting the assessment 
process. Of the nine (9) IOA FMEAs, seven (7) were Criticality 
1/1 and two were Criticality 2/1R. The NASA analysis consisted 
of nine (9) FMEAs and nine (9) CIL items. Of the nine (9), eight 
(8) were Criticality 1/1 and one (1) was Criticality 2/1R. 

After re-evaluating the component involved and the function it 
performs in comparison to the NASA Post 51L FMEA/CILs, IOA 
recommends the IOA FMEAs be changed to agree with the NASA FMEAs 
and CIL items. There are no issues to be resolved for the 
Landing/Deceleration System Pyrotechnics. 
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4 . 2 Assessment Results - Orbiter/ET Separation Mechanisms 

Pyrotechnics 

The IOA analysis of the Orbiter/ET Separation Mechanisms 
Pyrotechnics generated twelve (12) failure mode worksheets and 
identified twelve (12) Potential Critical Items before starting 
the assessment process. Of the twelve (12) IOA FMEAs , nine (9) 
were Criticality l/l and three (3) were Criticality 2/1R and all 
are considered PCIs. The NASA analysis consisted of twelve (12) 
FMEAs and twelve (12) CIL items. Of the twelve (12) , nine (9) 
were Criticality 1/1 and three (3) were Criticality 2/1R. There 
are no issues to be resolved for the Orbiter/ET Separation 
Mechanisms Pyrotechnics. 


4.3 Assessment Results - Rendezvous Radar (RR) Antenna Release 

Pyrotechnics 

The IOA analysis of the RR Antenna Release Pyrotechnics generated 
eight (8) failure mode worksheets and identified eight (8) 
Potential Critical Items before starting the assessment process. 
Of the eight (8) IOA FMEAs, four (4) were Criticality 1/1, two 
(2) were Criticality 2/1R and two (2) were Criticality 2/2. The 
NASA baseline consists of four (4) FMEAs and four (4) CIL items. 
The four (4) NASA FMEAs and four (4) of the IOA FMEAs are in 
agreement. However, there are four (4) IOA FMEAs which were 
generated for two (2) RR Antenna Release Pyrotechnics components 
that were not included in the NASA baseline. The two (2) 
components involved are the dual Pressure Cartridges for the 
Guillotine Assembly and also the dual Pressure Cartridges for the 
Release Nut. The failure modes identified by IOA are "Fail to 
Function" and "Inadvertent Operation" which results in four 
FMEAs, all of which are considered to be Potential Critical 
Items. IOA recommends that the NASA consider these failure modes 
for inclusion in the CIL for the RR Antenna Release Pyrotechnics. 
These issues have not been resolved. 


4.4 Assessment Results - Payload Retention/Deploy Guillotine 

and Jettison Pyrotechnics 

The IOA analysis of the Payload Retention/Deploy Guillotine and 
Jettison Pyrotechnics generated six (6) failure mode worksheets 
and identified six (6) Potential Critical Items before starting 
the assessment process. Of the six (6) IOA FMEAs, five (5) were 
Criticality 1/1 and one (1) was Criticality 2/2. The are 
considered PCIs. The NASA analysis consisted of six (6) FMEAs 
and six (6) CIL items. Of the six (6), five (5) were 
Criticality 1/1 and one (1) was Criticality 2/2. There are no 
issues to be resolved for the Payload Retention/Deploy Guillotine 
and Jettison Pyrotechnics. 
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4.5 Assessment Results - Crew Station and Equipment Ground 

Emergency Egress Pyrotechnics 

The IOA analysis of the Crew Station and Equipment Ground 
Emergency Egress Pyrotechnics generated six (6) failure mode 
worksheets and identified six (6) Potential Critical Items before 
starting the assessment process. Of the six (6) IOA FMEAs, two 
(2) were Criticality 1/1 and four (4) were Criticality 2/1R. 

There are no issues to be resolved for the Crew Station and 
Equipment Emergency Egress Pyrotechnics. 
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APPENDIX A 


ACRONYNS and ABBREVIATIONS 


AC 

- 

Alternating Current 

AOA 

- 

Abort Once Around 

Amp 

- 

Ampere 

Ant 

- 

Antenna 

ATO 

— 

Abort To Orbit 

BFS 

- 

Backup Flight Software 

CB 

— 

Circuit Breaker 

CIL 

- 

Critical Items List 

Ckt 

- 

Circuit 

Cont ' d 

- 

Continued 

Cur 

— 

Current 

Depl 

- 

Deploy 

DC 

— 

Direct Current 

EPD&C 

_ 

Electrical Power Distribution and Control 

Eq 

- 

Equipment 

ET 


External Tank 

F 


Functional 

FMC 

- 

Forward Motor Controller 

FMEA 

- 

Failure Mode Effects Analysis 

FPC 

- 

Forward Power Controller 

Func 

- 

Functional 

Fwd 

- 

Forward 

Guill 

- 

Guillotine 

Hdw 

— 

Hardware 

Herm 

— 

Hermetically 

HW 

— 

Hardware 

Hz 

— 

Hertz (cycles per second) 

IOA 

- 

Independent Orbiter Analysis 

Jett 

- 

Jettison 

LH2 

— 

Liquid Hydrogen 

Lim 

- 

Limiting 

L02 

- 

Liquid Oxygen 
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ACRONYMS and ABBREVIATIONS (Cont'd) 


MDAC 

- 

McDonnell Douglas Astronautics Company 


MDM 

- 

Multiplexer/Demultiplexer 


MLG 

- 

Main Landing Gear 

m > 

MPM 

- 

Manipulator Positioning Mechanixm 


MRL 

- 

Manipulatot Retention Mechanism 


NA 

— 

Not applicable 

- 

NASA 

- 

National Aeronautics and Space Administration 


NLG 

- 

Nose Landing Gear 


NS I 

- 

NASA Standard Initiator 

== 

NSTS 

- 

National Space Transportation System 


OA 

— 

Operational Aft 


OAO 

- 

Once-Around-Abort 

m 

ATO 

- 

Abort-to-Orbit 


OF 

- 

Operational Forward 


Orb 

“ 

Orbiter 

- 

P 


Pass 


PASS 

- 

Primary Avionics Systems Software 

= 

PBM 

- 

Payload Bay Mechanical 

* 

PCA 

- 

Power Controller Assembly 


PCI 

- 

Potential Critical Item 


Ph 

- 

Phase 

m 

PIC 

- 

Pyro Initiator Controller 


P/L 

. - 

Payload 


PLBD 

- 

Paylaod Bay Door 

& 

POS 

- 

Position 


Pyro 

— 

Pyrotechnic 


Rel 


Release 

3 

Retn 

- 

Retention 


RMS 

- 

Remote Manipulator System 


RPC 

- 

Remote Power Controller 

m 

RR 

- 

Rendezvous Radar 


RTLS 

— 

Return-To-Launch-S ite 

= 

Sep 

— 

Separation 

i 

Sta 

- 

Station 


STS 

- 

Space Transportation System 


Sys 

— 

System 

■ 

TAL 

- 

Trans-Atlantic-Landing (Abort Landing) 

— 

VAC 

_ 

Volts Alternating Current 

- 

VDC 

- 

Volts Direct Current 


1-Ph 

* 

Single Phase 

■ 

3-Ph 

“ 

Three Phase 
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DEFINITIONS, GROUND RULES, AND ASSUMPTIONS 


B.l Definitions 

B.2 Project Level Ground Rules and Assumptions 
B.3 Subsystem-Specific Ground Rules and Assumptions 
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APPENDIX B 

DEFINITIONS, GROUND RULES, AND ASSUMPTIONS 


B.l Definitions 

Definitions contained in NSTS 22206. Instructions For Preparation 
of FMEA/CIL. 10 October 1986 . were used with the following 
amplifications and additions. 

INTACT ABORT DEFINITIONS; 

RTLS - begins at transition to OPS 6 and ends at transition 
to OPS 9, post-flight 

TAL - begins at declaration of the abort and ends at 
transition to OPS 9, post-flight 

AOA - begins at declaration of the abort and ends at 
transition to OPS 9, post-flight 

ATO - begins at declaration of the abort and ends at 
transition to OPS 9, post-flight 

credible (CAUSED - an event that can be predicted or expected in 
anticipated operational environmental conditions. Excludes an 
event where multiple failures must first occur to result in 
environmental extremes 

CONTINGENCY CREW PROCEDURES - procedures that are utilized beyond 
the standard malfunction procedures, pocket checklists, and cue 
cards 

EARLY MISSION TERMINATION - termination of onorbit phase prior to 
planned end of mission 

EFFECTS /RATIONALE - description of the case which generated the 
highest criticality 

HIGHEST CRITICALITY - the highest functional criticality 
determined in the phase-by-phase analysis 

MAJOR MODE (MM) - major sub-mode of software operational sequence 
(OPS) 

MC - Memory Configuration of Primary Avionics Software System 
(PASS) 

MISSION - assigned performance of a specific Orbiter flight with 
payload/objective accomplishments including orbit phasing and 
altitude (excludes secondary payloads such as GAS cans, 
middeck P/L, etc.) 
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MULTIPLE ORDER FAILURE - describes the failure due to a single 
cause or event of all units which perform a necessary (critical) 
function 

OFF-NOMINAL CREW PROCEDURES - procedures that are utilized beyond 
the standard malfunction procedures, pocket checklists, and cue 
cards 

OPS - software operational sequence 

PRIMARY MISSION OBJECTIVES worst case primary mission objec- 
tives are equal to mission objectives 

PHASE DEFINITIONS: 

PRELAUNCH PHASE - begins at launch count-down Orbiter 
power-up and ends at moding to OPS Major Mode 102 (liftoff) 

LIFTOFF MISSION PHASE - begins at SRB ignition (MM 102) and 
ends at transition out of OPS 1 (Synonymous with ASCENT) 

ONORBTT phase - begins at transition to OPS 2 or OPS 8 and 
ends at transition out of OPS 2 or OPS 8 

DEORBIT PHASE - begins at transition to OPS Major Mode 
301 and' ends at first main landing gear touchdown 

landing /saftng PHASE - begins at first main gear 
touchdown and ends with the completion of post-landing 
safing operations 
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APPENDIX B 

DEFINITIONS, GROUND RULES, AND ASSUMPTIONS 


B. 2 IOA Project Level Ground Rules and Assumptions 

The philosophy embodied in NSTS 22206, Instructions for 
Preparation of FMEA/CIL. 10 October 1986 , was employed with the 
following amplifications and additions. 


1 . The operational flight software is an accurate 
implementation of the Flight System Software Requirements 
(FSSRs) . 

RATIONALE: Software verification is out-of-scope of 
this task. 

2. After liftoff, any parameter which is monitored by system 
management (SM) or which drives any part of the Caution and 
Warning System (C&W) will support passage of Redundancy 
Screen B for its corresponding hardware item. 

RATIONALE: Analysis of on-board parameter availability 
and/or the actual monitoring by the crew 
is beyond the scope of this task. 

3. Any data employed with flight software is assumed to be 
functional for the specific vehicle and specific mission 
being flown. 

RATIONALE: Mission data verification is out-of-scope of 
this task. 

4. All hardware (including firmware) is manufactured and 
assembled to the design specif ications/drawings. 

RATIONALE: Acceptance and verification testing is 

designed to detect and identify problems 
before the item is approved for use. 

5. All Flight Data File crew procedures will be assumed 
performed as written, and will not include human error in 
their performance. 

RATIONALE: Failures caused by human operational error 
are out-of-scope of this task. 
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6. All hardware analyses will, as a minimum, be performed at 
the level of analysis existent within NASA/Prime Contractor 
Orbiter FMEA/CILs , and will be permitted to go to greater 
hardware detail levels but not lesser. 

RATIONALE: Comparison of IOA analysis results with 

other analyses requires that both analyses 
be performed to a comparable level of 
detail. 

7. Verification that a telemetry parameter is actually 
monitored during AOS by ground-based personnel is not 
required. 

RATIONALE: Analysis of mission-dependent telemetry 

availability and/or the actual monitoring of 
applicable data by ground-based personnel is 
beyond the scope of this task. 

8. The determination of criticalities per phase is based on the 
worst case effect of a failure for the phase being analyzed. 
The failure can occur in the phase being analyzed or in 

any previous phase, whichever produces the worst case 
effects for the phase of interest. 

RATIONALE: Assigning phase criticalities ensures a 
thorough and complete analysis. 

9. Analysis of wire harnesses, cables, and electrical connectors 
to determine if FMEAs are warranted will not be performed 
nor FMEAs assessed. 

RATIONALE: Analysis was substantially complete prior 

to NSTS 22206 ground rule redirection. 

10. Analysis of welds or brazed joints that cannot be inspected 
will not be performed nor FMEAs assessed. 

RATIONALE: Analysis was substantially complete prior 

to NSTS 22206 ground rule redirection. 

11. Emergency system or hardware will include burst discs and 
will exclude the EMU Secondary Oxygen Pack (SOP) , pressure 
relief valves and the landing gear pyrotechnics. 

RATIONALE: Clarify definition of emergency systems to 
ensure consistency throughout IOA project. 
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APPENDIX B 

DEFINITIONS, GROUND RULES, AND ASSUMPTIONS 


B.3 Pyrotechnics-Specific Ground Rules and Assumptions 

The IOA analysis was performed to the component or assembly level 
of the Pyrotechnic devices in the Orbiter Landing Systems, 
Orbiter/ET Separation System, RMS Guillotine and Jettison System, 
Rendezvous Radar Release System, and the Ground Emergency Egress 
System. The analysis considered the worst case effects of the 
hardware or functional failure on the subsystem, mission, and 
crew and vehicle safety. 

1. Component age life was not considered in the analysis. 

RATIONALE: Component age analysis is beyond the scope 

of this task. 


2. Criticality of emergency system failure modes were 
established on the basis of the effect of the first 
failure of the emergency system on the crew or vehicle. 

RATIONALE: Regardless of the number of failures that 

would have to occur before the emergency 
system would be required, its purpose is 
to accomplish its intended task without 
fail under emergency conditions. Emergency 
systems are not employed unless .there is 
an emergency condition in existence. 

3. Criticality of backup system pyrotechnic failures were 
established with the same approach as emergency systems. 

RATIONALE: The backup pyrotechnics involved in this 

analysis are employed only (albeit 
automatically) after failure of the 
primary system, as in the Landing 
Gear deployment, therefore all previous 
failures are discounted in the Criticality 
assignments. 

4. Premature of inadvertent operation of pyrotechnic 
devices is considered to be the highest criticality. 

RATIONALE: Uncommanded operation by a pyrotechnic 

device would be catastrophic particularly 
when involved in separation of Shuttle 
elements and premature deployment of 
landing gear. Premature operation of 
emergency or backup pyrotechnics could 
likewise cause unpredictable results. 
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5. Failure inodes were limited to failure of the component 
or assembly to function as intended and inadvertent 
or premature uncommanded operation. 

RATIONALE: Whether the cause of the failure of a 

pyrotechnic device to function as intended 
to accomplish an action be a failure to 
fire, fire with insufficient force, or low 
pressure output, the result would be 
essentially the same. Failures of other 
systems that cause inadvertent operation 
of the pyrotechnic devices covered in this 
analysis are not considered a failure of 
the pyrotechnic device itself. If a 
switch fails and causes a command to be 
issued to fire a pyrotechnic device, the 
failure lies with the switch. 
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APPENDIX C 
DETAILED ASSESSMENT 

This section contains the IOA assessment worksheets generated 
during the Assessment of the Pyrotechnics Subsystem. The 
information on these worksheets facilitates the comparison of 
the NASA FMEA/CIL (Pre and Post 51-L) to the IOA detailed 
analysis worksheets included in Appendix E. Each of these 
worksheets identifies the NASA FMEA being assessed, corresponding 
MDAC Analysis Worksheet ID (Appendix E) , hardware item, 
criticality, redundancy screens, and recommendations. For each 
failure mode, the highest assessed hardware and functional 
criticality is compared and discrepancies noted as "N" in the 
compare row under the column where the discrepancy occurred. 


LEGEND FOR IOA ASSESSMENT WORKSHEETS 


Hardware Criticalities: 

1 = Loss of life or vehicle 

2 = Loss of mission or next failure of any redundant item 

(like or unlike) could cause loss of life/vehicle 

3 * All others 

Functional Criticalities: 

1R = Redundant hardware items (like or unlike) all of which, 
if failed, could cause loss of life or vehicle 
2R = Redundant hardware items (like or unlike) all of which, 
if failed, could cause loss of mission 

Redundancy Screens A, B and C: 

P = Passed Screen 
F * Failed Screen 
NA = Not Applicable 

NASA Data : 

Baseline - NASA FMEA/CIL 

New - Baseline with Proposed Post 51-L Changes 

CIL Item : 

X = Included in CIL 


Compare Row : 

N = Non compare for that column (deviation) 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4601 

NASA FMEA #: P2-1A-015-2 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 


PYROTECHNICS 

4601 

THRUSTER ASSY 
W. W. ROBINSON 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY SCREENS 

FLIGHT 




HDW/FUNC 

A 

B 

C 

NASA [1/1 ] 

[ ] 

[ ] 

[ ] 

IOA [1/1 ] 

[ NA] 

[ NA] 

[ NA] 

COMPARE [ / ] 

[ N ] 

[ N ] 

[ N ] 


CIL 

ITEM 


[ X ] * 
[ X ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 


C-2 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


2/04/88 

PYRO-4602 

P2-1A-035-1 

PYROTECHNICS 

4602 

PRESSURE CARTRIDGE 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [1/1 ] 

[ ] 

[ ] 

[ ] 

[ x ] 

IOA [1/1 ] 

[ NA] 

[ NA] 

[ NA] 

[ x ] 

COMPARE [ / ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 


(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

NONE 


REPORT DATE 02/05/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4603 

NASA FMEA #: P2-1A-035-2 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4603 

PRESSURE CARTRIDGE 


LEAD ANALYST: W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[1/1 ] 

[ ] 

[ ] 

[ ] 

[ x 

IOA 

[1/1 ] 

[ NA] 

[ NA] 

[ NA] 

[ x 

COMPARE 

[ / ] 

[ N ] 

[ N ] 

[ N ] 

[ 


RECOMMENDATIONS: (If different from NASA) 


C / ] [][][] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


2/04/88 

PYRO-4604 

P2-1A-097-1 

PYROTECHNICS 

4604 

THRUSTER ASSY 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: 


W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [1/1 ] 

[ ] 

[ ) 

[ ] 

[ X ] 

IOA [ 2 /1R ] 

[ NA] 

[ NA] 

[ NA] 

[ X ] 

COMPARE [ N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

NO ISSUE, IOA CONCURS WITH NASA POST 51L FMEA. UPGRADE IOA CRIT 
TO 1/1. 


REPORT DATE 02/05/88 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4605 

NASA FMEA #: 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


P2-1A-103-1 

PYROTECHNICS 

4605 

PRESSURE CARTRIDGE 
W. W. ROBINSON 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 1 /l ] 

[ ] 

[ ] 

t ] 

[ X ] * 

IOA 

[ 2 /1R ] 

[ NA] 

[ NA] 

[ NA] 

[ x ] 

COMPARE 

( N /N ] 

C N 3 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

C ] 

[ 1 

C ] 

[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS 1 

NO ISSUE, IOA CONCURS WITH NASA POST 51L FMEA. UPGRADE IOA CRIT 
TO 1/1. 


REPORT DATE 02/05/88 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


2/04/88 

PYRO-4606 

P2-1A-103-2 

PYROTECHNICS 

4606 

PRESSURE CARTRIDGE 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [1/1 ] 

[ ] 

[ ] 

[ ] 

[ x 

IOA [1/1 ] 

[ NA] 

[ NA] 

[ NA] 

[ x 

COMPARE [ / ] 

[ N ] 

[ N ] 

[ N 3 

[ 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] C 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 


C-7 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4607 

NASA FMEA #: P2-1A-104-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 


PYROTECHNICS 

4607 

THRUSTER ASSY 
W. W. ROBINSON 


ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[1/1 3 

[ 3 

[ 3 

[ 1 

[ x ] 

IOA 

[i/i 3 

[ NA] 

[ NA] 

[ NA] 

[ x ] 

COMPARE 

[ / 3 

[ N ] 

[ N ] 

[ N ] 

[ 3 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [](][] [ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 


C-8 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


2/04/88 

PYRO-4608 

P2-1A-107-1 

PYROTECHNICS 

4608 

PRESSURE CARTRIDGE 
W. W. ROBINSON 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [ 2 /1R ] 

[ NA] 

[ NA] 

[ p ] 

[ x 

IOA [1/1 ] 

[ NA] 

[ NA] 

[ NA] 

[ x 

COMPARE [ N /N ] 

[ 1 

[ ] 

[ N ] 

. [ 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ ] t ] C 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


jvcaruvcvEw • _ ___ 

NO ISSUE. IOA CONCURS WITH THE NASA FMEA. RECOMMEND DOWNGRADING 
THE CRIT OF THIS FMEA TO 2/1R. 


REPORT DATE 02/08/88 


C-9 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4609 

NASA FMEA #: P2-1A-107-2 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4609 

PRESSURE CARTRIDGE 


LEAD ANALYST: W. W. ROBINSON 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 1 /l ] 

[ ] 

C 3 

[ 3 

[ X ] * 

IOA 

C i /i ] 

[ NA] 

[ NA] 

[ NA] 

[ x ] 

COMPARE 

[ / ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ ] 

[ ] 

[ ] 

[ ] 




(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 


C-10 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


2/04/88 

PYRO-4651 

02-3-F3-1 

PYROTECHNICS 

4651 

SHEAR BOLT 
W. W. ROBINSON 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [1/1 ] 

[ 3 

[ 3 

[ 3 

[ X ] 

IOA [1/1 ] 

[ NA] 

[ NA] 

[ NA] 

[ X ] 

COMPARE [ / ] 

[ N ] 

[ N ] 

[ N ] 

[ 1 


* 


RECOMMENDATIONS: (If different from NASA) 

[ ] [ ] [ ] [3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 


C-ll 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4652 

NASA FMEA #: 02-3-F3-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 


PYROTECHNICS 

4652 

SHEAR BOLT ... 

W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [1/1 ] 

[ ] 

[ ] 

[ ] 

[ x ] 

IOA [1/1 ] 

[ NA] 

[ NA] 

[ NA] 

[ x ] 

COMPARE [ / ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] C ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 


C-12 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


2/04/88 

PYRO-4653 

02-3-F1-1 

PYROTECHNICS 

4653 

PRESSURE CARTRIDGE 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


LEAD ANALYST: W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [ 2 /1R ] 

[ NA] 

[ NA] 

[ p ] 

[ x ] 

IOA [ 2 /1R ] 

[ NA] 

[ NA] 

[ NA] 

[ x ] 

COMPARE [ / ] 

C ] 

[ ] 

[ N ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] i ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO ISSUE. CORRECT IOA FMEA SCREEN C. 


REPORT DATE 02/05/88 


C-13 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4654 

NASA FMEA #: 02-3-F1-2 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4654 

PRESSURE CARTRIDGE 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


LEAD ANALYST: 


W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [1/1 ] 

IOA [1/1 ] 

COMPARE [ / ] 


REDUNDANCY SCREENS 


[ ] 

[ NA] 

[ N ] 


[ ] 

[ NA] 

[ N ] 


[ ] 

[ NA] 

[ N ] 


CIL 

ITEM 


[ X ] * 
[ X ] 


[ ] 


RECOMMENDATIONS: (If different from NASA) 


[ / ] 


[ ] t ] [ 1 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 


C-14 


Hill I 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


2/04/88 

PYRO-4655 

02-3-A4-1 

PYROTECHNICS 

4655 

FRANGIBLE NUT 
W. W. ROBINSON 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 1 /l ] 

[ 

3 

[ 3 

[ ] 

[ X ] * 

IOA 

[1/1 ] 

[ NAJ 

[ NA] 

[ NA] 

[ x ] 

COMPARE 

[ / 3 

[ N ] 

[ N ] 

[ N ] 

[ 3 

RECOMMENDATIONS : 

(If different 

from NASA) 



[ / 3 

[ 

3 

[ ' 3 

[ 3 

[ 3 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 


C-15 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4656 

NASA FMEA #: 02-3-A4-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 


PYROTECHNICS 

4656 

FRANGIBLE NUT 
W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [1/1 ] 

[ ] 

[ ] 

[ ] 

[ x ] 

IOA [1/1 ] 

[ NA] 

[ NA] 

[ NA] 

[ X ] 

COMPARE [ / ] 

t N ] 

[ N ] 

[ N ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] ['][][] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 


C-16 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4657 

NASA FMEA #: 02-3-A6-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4657 

DETONATOR BOOSTER (2) 


LEAD ANALYST: W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R ] 

C NA] 

[ NA] 

[ p ] 

[ x 

IOA 

[ 2 /1R ] 

[ NA] 

[ NA] 

[ NA] 

[ x 

COMPARE 

[ / 3 

[ ] 

[ ] 

[ N ] 

[ 

RECOMMENDATIONS : 

(If different 

from NASA) 



[ / ] 

[ 1 

[ . 1 

[ ] 

[ 


(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO ISSUE. CORRECT IOA SCREEN C. 


REPORT DATE 02/05/88 


C-17 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4658 

NASA FMEA #: 02-3-A6-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4658 

DETONATOR BOOSTER (2) 


LEAD ANALYST: W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


NASA [1/1 ] 

IOA [1/1 ] 


[ ] C 1 [ ] 

[ NA] [ NA] [ NA] 


COMPARE [ / 


[ N ] [ N ] [ N ] 


CIL 

ITEM 


[ X ] * 

[ X ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ • ] [3 C 3 [ 3 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 C-18 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4661 

NASA FMEA #: 02-3-U4-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: PYROTECHNICS 

MDAC ID: 4661 

ITEM: FRANGIBLE NUT 


LEAD ANALYST: W. W. 

ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [1/1 ] 

IOA [1/1 ] 

COMPARE [ / ] 

RECOMMENDATIONS : (If 

[ / 1 


ROBINSON 

REDUNDANCY SCREENS 
ABC 

[ ] [ ] [ ] 

[ NA] [ NA] [ NA] 

[ N ] [ N ] [ N ] 

different from NASA) 

[ ] [ 1 [ ] 


CIL 

ITEM 


[ X ) * 

[ X ] 

[ ] 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

NONE 


REPORT DATE 02/05/88 


C-19 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4662 

NASA FMEA #: 02-3-U4-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 


PYROTECHNICS 

4662 

FRANGIBLE NUT 
W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [1/1 ] 

[ ] 

[ ] 

[ ] 

[ x 

IOA [1/1 ] 

[ NA] 

[ NA] 

[ NA] 

[ x 

COMPARE [ / ] 

[ N ] 

[ N ] 

[ N ] 

[ 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 


C-20 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


2/04/88 

PYRO-4663 

02-3-U1-1 

PYROTECHNICS 

4663 

DETONATOR . 

W. W. ROBINSON 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R ] 

[ NA] 

[ NA] 

[ P 3 

[ x 

IOA 

( 2 /1R ] 

[ NA] 

[ NA] 

[ NA] 

[ x 

COMPARE 

[ / 3 

[ 3 

[ 3 

[ N ] 

[ 


RECOMMENDATIONS: (If different from NASA) 

[ / ] C 3 [ 3 [ 3 t 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO ISSUE. CORRECT IOA FMEA SCREEN C. 


REPORT DATE 02/05/88 


C-21 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4664 

NASA FMEA #: 02-3-U1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 


PYROTECHNICS 

4664 

DETONATOR . 

W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [1/1 ] 

[ 3 

[ 3 

[ 3 

[ x ] 

IOA [1/1 3 

[ NA] 

[ NA3 

[ NA] 

[ x 1 

COMPARE [ / ] 

[ N 3 

[ N ] 

[ N ] 

[ 3 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 []['][] [ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 


C-22 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4701 

NASA FMEA #: 02-4-R103-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4701 

GUILLOTINE ASSY, PYROTECHNIC 


LEAD ANALYST: W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [1/1 ] 

[ F ] 

[ P 1 

[ P ] 

[ x 

IOA [1/1 ] 

[ NA] 

[ NA] 

[ NA] 

[ x 

COMPARE [ / ] 

[ N ] 

[ N ] 

[ N ] 

[ 


* 


RECOMMENDATIONS: (If different from NASA) 


[ / ] [][][] C ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 


C-23 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4702 

NASA FMEA #: 02-4-R103-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4702 

GUILLOTINE ASSY, PYROTECHNIC 


LEAD ANALYST: W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 


REDUNDANCY SCREENS 


CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

IOA 

[2/2 ] 
[2/2 ] 

[ P ] 

[ NA] 

[ F ] 
[ NA] 

[ P ] 

[ NA] 

[ X ] * 

[ x ] 

COMPARE 

[ / 1 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : 

(If different 

from 

NASA) 



[ / 1 

[ ] 

[ ] 

[ ] 

[ 1 

. (ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 


C-24 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4703 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4703 

PRESSURE CARTRIDGE (2) 


LEAD ANALYST: W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

IOA [ 2 /1R ] 

[ NA] 

[ NA] 

[ NA] 

[ x ] 

COMPARE [ N /N ] 

[ N ] 

[ N ] 

t N ] 

[ N ] 


RECOMMENDATIONS : 
[ 2 /1R 


(If different from NASA) 

[ NA] [ NA] [ NA] 


[ X ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS l 

RECOMMEND THAT A NASA FMEA BE GENERATED FOR THIS FAILURE MODE FOR 
THIS COMPONENT. 


REPORT DATE 02/05/88 


C-25 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4704 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4704 

PRESSURE CARTRIDGE (2) 


LEAD ANALYST: W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ / ] 

[ ] 

[ ] 

[ ] 

[ 

IOA [2/2 ] 

[ NA] 

[ NA] 

[ NA] 

[ x 

COMPARE [ N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ N 


RECOMMENDATIONS: (If different from NASA) 

[2/2 ) [ ] [ ] [ ] [ X ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

RECOMMEND THAT A NASA FMEA BE GENERATED FOR THIS FAILURE MODE FOR 
THIS COMPONENT. '= 5S ' i ' ! 


REPORT DATE 02/05/88 


C-26 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4705 
NASA FMEA #: 02-4-R104-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4705 

RELEASE NUT 


LEAD ANALYST: W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [1/1 ] 

[ P 3 

[ F ] 

[ P 3 

[ X ] * 

IOA [1/1 ] 

[ NA] 

[ NA] 

[ NA] 

[ x ] 

COMPARE [ / ] 

[ N ] 

[ N ] 

[ N ] 

[ 3 


RECOMMENDATIONS: (If different from NASA) 

[ / ] (][][] c ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 


C-27 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4706 

NASA FMEA #: 02-4-R104-2 


NASA DATA: . 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 


PYROTECHNICS 

4706 

RELEASE NUT 
W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


NASA [1/1 ] 

IOA [1/1 ] 


[ P ] [ F ] [ P ] 

[ NA] [ NA] [ NA] 


CIL 

ITEM 


[ X ] * 

[ X ] 


COMPARE [ / 


[ N ] [ N ] [ N ] 


3 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 [][][] C 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 


C-28 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4707 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4707 

PRESSURE CARTRIDGE (2) 


LEAD ANALYST: 


W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ / ] 

[ ] 

[ 1 

E ] 

E 

IOA [ 2 /1R ] 

[ NAj 

E NAj 

[ NA] 

[ x 


COMPARE [ N /N 


[ N ] [ N ] [ N ] 


[ N ] 


RECOMMENDATIONS: (If different from NASA) 

( 2 /1R ] [ ] [ ] [ ] [ X ] . 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

RECOMMEND THAT A NASA FMEA BE GENERATED FOR THIS FAILURE MODE FOR 
THIS COMPONENT. 


REPORT DATE 02/05/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4708 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4708 

PRESSURE CARTRIDGE (2) 


LEAD ANALYST: W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [ / ] 

[ 3 

[ 3 

[ ] 

[ 3 

IOA [1/1 3 

[ NA] 

[ naj 

[ NA] 

[ X 3 

COMPARE [ N /N ] 

[ N 3 . 

[ n 3 

[ N ] 

[ N ] 


RECOMMENDATIONS : 

[ 1 /I 


(If different from NASA) 

[ ] [ ] [ 


. [ x ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

RECOMMEND THAT A NASA FMEA BE GENERATED FOR THIS FAILURE MO DE FOR 
THIS COMPONENT. 


REPORT DATE 02/05/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4751 

NASA FMEA #: 02-5-J01-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4751 

RETRACTOR MANIPULATOR ARM RELEASE 


LEAD ANALYST: W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [1/1 ] 

[ NA] 

[ NA] 

[ NA] 

[ x 

IOA [1/1 ] 

[ NA] 

[ NA] 

[ NA] 

[ x 

COMPARE [ / ] 

C ] 

[ ] 

[ ] 

[ 

RECOMMENDATIONS : (If 

different 

from NASA) 


[ / ] 

[ ] 

[ ] 

[ ] 

[ 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4752 

NASA FMEA #: 02-5-J01-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4752 

RETRACTOR - MANIPULATOR ARM RELEASE 


LEAD ANALYST: 


W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY SCREENS 
ABC 


CIL 

ITEM 


NASA [1/1 ] 

IOA [1/1 ] 


[ NA] [ NA] [ NA] 

[ NA] [ NA] [ NA] 


[ X ] * 

[ X ] 


COMPARE [ / 


3 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 [][][] [ 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4753 

NASA FMEA #: 02-5-J02-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4753 

GUILLOTINE .ASSY PYRO 


LEAD ANALYST: W. W. ROBINSON 


ASSESSMENT: 



CRITICALITY 


REDUNDANCY SCREENS 

CIL 


FLIGHT 





ITEM 


HDW/FUNC 


A 

B 

c 


NASA 

[1/1 ] 

[ 

NA] 

[ NA] 

[ NA] 

[ X ] 

IOA 

[1/1 ] 

[ 

NA] 

[ NA] 

[ NA] 

[ x ) 

COMPARE 

[ / ] 

[ 

] 

[ ] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from NASA) 



[ / ] [][][] [ 1 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4754 

NASA FMEA #: 02-5-J02-2 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


PYROTECHNICS 

4754 

GUILLOTINE ASSY PYRO 
W. W. ROBINSON 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [ 1 /I ] [ NA] [ NA] [ NA] 

IOA [ 1 /I ] [ NA] [ NA] [ NA] 


[ X ] * 
C X ] 


COMPARE [ / 


] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] C ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4755 

NASA FMEA #: 02-5-J04-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 


PYROTECHNICS 

4755 

GUILLOTINE ASSY 
W. W. ROBINSON 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [1/1 ] 

[ NA] 

[ NA] 

[ NA] 

[ x 

IOA [1/1 ) 

[ NA] 

[ NA] 

[ NA] 

[ x 

COMPARE [ / ] 

[ 3 

[ 3 

[ ] 

[ 


RECOMMENDATIONS: (If different from NASA) 

[/]’[] [ ] [ ] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4756 

NASA FMEA #: 02-5-J04-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 


PYROTECHNICS 

4756 

GUILLOTINE ASSY 
W. W. ROBINSON 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[2/2 ] 

[ ] 

[ 3 

[ ] 

[ x 

IOA 

[2/2 ] 

[ NA] 

[ NA] 

[ NA] 

[ x 

COMPARE 

[ / ] 

[ N ] 

[ N ] 

[ N ] 

[ 


RECOMMENDATIONS: (If different from NASA) 

C / ] [][][] [ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


2/04/88 

PYRO-4801 

07-48051-1 

PYROTECHNICS 

4801 

OUTER WINDOW ASSY 
W. W. ROBINSON 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [1/1 ] 

[ NA] 

[ NA] 

[ NA] 

[ x 

IOA [1/1 ] 

[ NA) 

[ NA] 

[ NA] 

[ x 


COMPARE [ / 


] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ ] [ ] C ] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE ( ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4802 

NASA FMEA #: 07-48052-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4802 

OUTER WINDOW ASSY 


LEAD ANALYST: W. W. ROBINSON 


ASSESSMENT : 


CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [1/1 ] 

IOA [1/1 ] 

COMPARE [ / ] 


REDUNDANCY SCREENS 


A 

B 


C 

NA] 

[ NA] 

[ 

NA] 

NA] 

[ NA] 

[ 

NA] 

3 

[ 3 

[ 

3 


CIL 

ITEM 


[ X ] * 
[ X ] 

[ 3 


RECOMMENDATIONS: (If different from NASA) 

[• / 3 [][][] C 3 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NONE 


REPORT DATE 02/05/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 
ASSESSMENT ID: PYRO-4803 

NASA FMEA #: 07-48053-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS 

4803 

ENERGY TRANSFER SYSTEM 


LEAD ANALYST: 


W. W. ROBINSON 


ASSESSMENT : 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R ] 

[ F ] 

[ F ] 

[ P ] 

[ x 

IOA 

[ 2 /1R ] 

[ NA] 

( NAf ' 

‘ [ NA] 

[ x 

COMPARE 

[ / ] 

[ N ] 

[ N ] 

[ N ] 

C 


RECOMMENDATIONS : (If different from NASA) 


[ / ] [][][] C ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO ISSUE. CORRECT IOA SCREENS. 


REPORT DATE 02/05/88 


C-39 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


2/04/88 

PYRO-4804 

07-48054-1 

PYROTECHNICS 

4804 

INITIATOR ASSY PYRO 
W. W. ROBINSON 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


ASSESSMENT: 



CRITICALITY 


REDUNDANCY SCREENS 

CIL 



FLIGHT 





ITEM 


HDW/FUNC 


A 

B 

C 



NASA 

[ 2 /1R ] 

[ 

F ] 

[ F ] 

C p ] 

[ x 

] * 

IOA 

[ 2 /1R ] 

[ 

NA] 

[ NA] 

[ NA] 

[ x 

] 

COMPARE 

[ / ] 

C 

N ] 

[ N ] 

[ N ] 

[ 

] 

RECOMMENDATIONS : (If 

different 

from NASA) 




[ / ] 

[ 

] 

[ ] 

[ ] 

[ 

3 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO ISSUE. CORRECT IOA SCREENS. 


REPORT DATE 02/05/88 
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APPENDIX C 

AS S ESSMENT WORKSHEET 


ASSESSMENT DATE: 2/04/88 NASA DATA: 

ASSESSMENT ID: PYRO-4805 BASELINE [ X ] 

NASA FMEA #: 07-48055-1 NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


PYROTECHNICS “ I ' 

4805 

0.3-SEC TIME DELAY CARTRIDGE ASSY 


LEAD ANALYST: W. W. ROBINSON 


ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R ] 

[ F ] 

[ F ] 

[ P ] 

C x ] 

IOA 

[ 2 /1R ] 

[ NA] 

[ NA] 

( NA] 

[ X ] 

COMPARE 

[ / ] 

[ N ] 

C N ] 

[ N ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ ] C 3 [ 3 C ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO ISSUE. CORRECT IOA SCREENS. 


REPORT DATE 02/05/88 


C-41 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


2/04/88 

PYRO-4806 

07-48056-1 

PYROTECHNICS 

4806 

THRU BULKHEAD INITIATOR 
W. W. ROBINSON 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ 2 /1R ] 

[ F ] 

[ F ] 

[ P ] 

[ x ] 

IOA [ 2 /1R ] 

[ NA] 

[ NA] 

[ NA] 

[ x ] 

COMPARE [ / ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO ISSUE. CORRECT IOA SCREENS. 


REPORT DATE 02/05/88 
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CRITICAL ITEMS 
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APPENDIX D 


CRITICAL ITEMS 


NASA FMEA 

10 A ID 

ITEM 

P2-1A-015-2 

4601 

THRUSTER ASSY 

P2-1A-035-1 

4602 

PRESSURE CARTRIDGE 

P2-1A-035-2 

4603 

PRESSURE CARTRIDGE 

P2-1A-097-1 

4604 

THRUSTER ASSY 

P2-1A-103-1 

4605 

PRESSURE CARTRIDGE 

P2-1A-103-2 

4606 

PRESSURE CARTRIDGE 

P2-1A-104-1 

4607 

THRUSTER ASSY 

P2-1A-107-1 

4608 

PRESSURE CARTRIDGE 

P2-1A-107-2 

4609 

PRESSURE CARTRIDGE 

02-3-F3-1 

4651 

SHEAR BOLT 

02-3-F3-2 

4652 

SHEAR BOLT 

02-3-F1-1 

4653 

PRESSURE CARTRIDGE 

02-3-F1-2 

4654 

PRESSURE CARTRIDGE 

02-3-A4-1 

4655 

FRANGIBLE NUT 

02-3-A4-2 

4656 

FRANGIBLE NUT 

02-3-A6-1 

4657 

DETONATOR BOOSTER (2) 

02-3-A6-2 

4658 

DETONATOR BOOSTER (2) 

02-3-U4-1 

4661 

FRANGIBLE NUT 

02-3-U4-2 

4662 

FRANGIBLE NUT 

02-3-U1-1 

4663 

DETONATOR 

02-3-U1-2 

4664 

DETONATOR 

02-4-R103-1 

4701 

GUILLOTINE ASSY, PYRO 

02-4-R103-2 

4702 

GUILLOTINE ASSY, PYRO 

NONE 

4703 

PRESSURE CARTRIDGE (2) 

NONE 

4704 

PRESSURE CARTRIDGE (2) 

02-4-R104-1 

4705 

RELEASE NUT 

02-4-R104-2 

4706 

RELEASE NUT 

NONE 

4707 

PRESSURE CARTRIDGE (2) 

NONE 

4708 

PRESSURE CARTRIDGE (2) 

02-5-J01-1 

4751 

RETRACTOR - MANIP ARM 

02-5-J01-2 

4752 

RETRACTOR - MANIP ARM 

02-5-J02-1 

4753 

GUILLOTINE ASSY PYRO 

02-5 -J 02-2 

4754 

GUILLOTINE ASSY PYRO 

02-5-J04-1 

4755 

GUILLOTINE ASSY 

02-5-J04-2 

4756 

GUILLOTINE ASSY 

07-48051-1 

4801 

OUTER WINDOW ASSY 

07-48052-1 

4802 

OUTER WINDOW ASSY 

07-48053-1 

4803 

ENERGY TRANSFER SYSTEM 

07-48054-1 

4804 

INITIATOR ASSY PYRO 

07-48055-1 

4805 

0.3 -SEC TIME DEL CART 

07-48056-1 

4806 

THRU BULKHEAD INIT 


FAILURE MODE 


FAILS TO OPERATE 
FAILS TO OPERATE 
INADVERTENT OPERATION 
FAILS TO OPERATE 
FAILS TO OPERATE 
FIRES INADVERTENTLY 
FAIL TO OPERATE 
FAIL TO OPERATE 
FIRES INADVERTENTLY 
PREMATURE FRACTURE 
FAIL TO FRACTURE 
FAIL TO FUNCTION 
INADVERTENT OPERATION 
PREMATURE FRACTURE 
FAIL TO FRACTURE 
FAILS TO FIRE 
INADVERTENT OPERATION 
FAIL TO FRACTURE 
PREMATURE FRACTURE 
FAIL TO FIRE 
INADVERTENT OPERATION 
FAIL TO FUNCTION 
INADVERTENT OPERATION 
FAIL TO FUNCTION 
INADVERTENT OPERATION 
FAIL TP FUNCTION 
INADVERTENT OPERATION 
FAIL TO FUNCTION 
INAD VERT ENT OPERATION 
FAILS TO FUNCTION 
INADVERTENT OPERATION 
FAILS TO FUNCTION 
INADVERTENT OPERATION 
FAILS TO FUNCTION 
INADVERTENT OPERATION 
FAILS TO OPEN 
FAILS TO OPEN 
REDUCED OR NO OUTPUT 
NO OUTPUT 

NO OUTPUT, X-S DELAY 
NO OUTPUT 
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APPENDIX E 
DETAILED ANALYSIS 

This appendix contains the IOA analysis worksheets supplementing 
previous results reported in STSEOS Working Paper 1 . 0-WP-VA85001- 
01, Analysis of the Pyrotechnics Subsystem FMEA/CIL (01 January 
1988) . Prior results were obtained independently and documented 
before starting the FMEA/CIL assessment activity. Supplemental 
analysis was performed to address failure modes not previously 
considered by the IOA. Each sheet identifies the hardware item 
being analyzed, parent assembly and function performed. For each 
failure mode possible causes are identified, and hardware and 
functional criticality for each mission phase are determined as 
described in NSTS 22206, Instructions for Preparation of FMEA and 
CIL . 10 October 1986 . Failure mode effects are described at the 
bottom of each sheet and worst case criticality is identified at 
the top. 


LEGEND FOR IOA ANALYSIS WORKSHEETS 


Hardware Criticalities: 

1 = Loss of life or vehicle 

2 = Loss of mission or next failure of any redundant item 

(like or unlike) could cause loss of life/vehicle 

3 = All others 

Functional Criticalities: 

1R = Redundant hardware items (like or unlike) all of which, 
if failed, could cause loss of life or vehicle. 

2R = Redundant hardware items (like or unlike) all of which, 
if failed, could cause loss of mission. 


Redundancy Screen A: 

1 * Is Checked Out PreFlight 

2 = Is Capable of Check Out PreFlight 

3 * Not Capable of Check Out PreFlight 

NA = Not Applicable 


Redundancy Screens B and C: 
P » Passed Screen 
F ■ Failed Screen 
NA = Not Applicable 
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APPENDIX F 


NASA FMEA TO IOA WORKSHEET CROSS REFERENCE/RECOMMENDATIONS 

This section provides a cross reference between the NASA FMEA and 
corresponding IOA analysis worksheet (s) included in Appendix E. 
The Appendix F identifies: NASA FMEA Number, IOA Assessment 

Number, NASA criticality and redundancy screen data, and IOA 
recommendations . 


Appendix F Legend 
Code Definition 

1 IOA recommends Upgrading the FMEA Crit 
from 2/1R to 1/1. 

2 . IOA recommends that a NASA FMEA be generated for this 

failure mode for this component. 

3. IOA recommends correcting the screens on this IOA FMEA. 

4. IOA recommends Downgrading the FMEA Crit 

from 1/1 to 2/1R. 
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APPENDIX F 


NASA FMEA TO IOA WORKSHEET CROSS R E F E R E N C E / R E C OM M E N D A T I 0 N S 


IDENTI FIERS 


RECOMMEND 


FMEA NUMBER 


ASSESSMENT NO. 


SCREENS 


ABC 


SCREENS 


ABC 


P2-1A-015-2 


P2-1A-035- 1 


P2-1A- 035-2 


P2- 1A-097- 1 


P2- 1 A- 103- 1 


P2 - 1A- 103-2 


P2-1A-104-1 


P2-1A-107-1 


P2-1A- 107-2 


02-3- F3- 1 


02-3-F3-2 


02-3-F1-1 


PYR0-4601 


PYR0-4602 


PYRO-4603 


PYR0-4604 


PYRO-4605 


PYRO-4606 


PYRO-4607 


PYRO-4608 


PYRO-4609 


PYRO-465 1 


PYRO-4652 


PYRO-4653 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


IDENTIFIERS 


RECOMMEND 


F M E A NUMBER 


ASSESSMENT NO. 


SCREENS 


ABC 


SCREENS 


ABC 


CODES 


02-3- FI -2 


02-3-A4- 1 


02-3- A4-2 


02-3- A6- 1 


02-3-A6-2 


02-3-U4- 1 


02-3-U4-2 


02-3-U1 - 1 


02-3-U1-2 


02-4-R103-1 


02-4-R103-2 


02-4-R104- 1 


02-4-R104-2 


PYRO-4654 


PYRQ-4655 


PYRO-4656 


PYRO-4657 


PYRO-4658 


PYRO-4661 


PYRO-4662 


PYRO-4663 


PYRO-4664 


PYRO-4701 


PYRO-4702 


PYRO-4703 


PYRO- 4704 


PYR0-4705 


PYRO-4706 


NA NA P 


NA NA P 


F P P 


P F P 


P F P 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 
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IDENTIFIERS 


F HE A NUMBER 


02-5- J01 - 1 


02-5- J01 -2 


02-5- J02- 1 


02-5- J02-2 


02 - 5 - d04 - 1 


02-5- J04-2 


07-48051 - 1 


07-48052-1 


07-48053-1 


07-48054-1 


07-48055-1 


07-48056-1 


ASSESSMENT NO, 


PYRQ-4707 


PYRO-4708 


PYRO-475 1 


PYRO-4752 


PYRO-475 3 


PYRO- 4754 


PYRO-4755 


PYRO-4756 


PYRO-4801 


PYRO-4802 


PYRO- 4803 


PYRO-4804 


PYRO-4805 


PYRO-4806 


SCREENS 


ABC 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


F F P 


F F P 


F F P 


SCREENS 


ABC 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


NA NA NA 


CODES | ISSUE | 
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